diff --git a/Cargo.lock b/Cargo.lock
index 30ccc8fc4504..2dedfb9cb18c 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -3790,7 +3790,7 @@ dependencies = [
  "futures",
  "futures-util",
  "opendal",
- "quick-xml",
+ "quick-xml 0.29.0",
  "serde",
  "tokio",
  "toml 0.7.5",
@@ -4003,7 +4003,7 @@ dependencies = [
  "prometheus",
  "prometheus-client",
  "prost",
- "quick-xml",
+ "quick-xml 0.30.0",
  "rand 0.8.5",
  "redb",
  "redis",
@@ -5189,6 +5189,16 @@ dependencies = [
  "serde",
 ]
 
+[[package]]
+name = "quick-xml"
+version = "0.30.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "eff6510e86862b57b210fd8cbe8ed3f0d7d600b9c2863cd4549a2e033c66e956"
+dependencies = [
+ "memchr",
+ "serde",
+]
+
 [[package]]
 name = "quote"
 version = "1.0.29"
@@ -5498,7 +5508,7 @@ dependencies = [
  "log",
  "once_cell",
  "percent-encoding",
- "quick-xml",
+ "quick-xml 0.29.0",
  "rand 0.8.5",
  "reqwest",
  "rsa",
diff --git a/core/Cargo.toml b/core/Cargo.toml
index 4d187d9c50d1..0686e24935ee 100644
--- a/core/Cargo.toml
+++ b/core/Cargo.toml
@@ -248,7 +248,7 @@ pin-project = "1"
 prometheus = { version = "0.13", features = ["process"], optional = true }
 prometheus-client = { version = "0.21.2", optional = true }
 prost = { version = "0.11", optional = true }
-quick-xml = { version = "0.29", features = ["serialize", "overlapped-lists"] }
+quick-xml = { version = "0.30", features = ["serialize", "overlapped-lists"] }
 rand = { version = "0.8", optional = true }
 redb = { version = "1.1.0", optional = true }
 redis = { version = "0.23.1", features = [
@@ -298,4 +298,4 @@ tracing-subscriber = { version = "0.3", features = [
   "env-filter",
   "tracing-log",
 ] }
-wiremock = "0.5"
\ No newline at end of file
+wiremock = "0.5"